THE NUMBER OF POINTS ON AN ELLIPTIC CURVE 
WITH SQUARE x-COORDINATES 



YU TSUMURA 

Abstract. Let K be a finite field. We know that half of the 
elements of K* are square. So it is natural to ask how many of 
them appear as ^-coordinates of points on an elliptic curve over K . 
We consider a specific class of elliptic curves over finite fields and 
show that half of the x-coordinates on an elliptic curve are square. 



1. Introduction. 

Let K be a finite field of characteristic different from 2. Let a,b e K 
satisfy b ^ and r = a 2 — 46 ^ 0. We consider a class of elliptic curves 
over K given by E : y 2 = x 3 + ax 2 + bx. 

We know that half of the elements of K* are square. So the nat- 
ural question is how many points on an elliptic curve have square x- 
coordinates. Since half of the elements of K* are square, we expect 
that half of the points on E(K) have square x-coordinate. 

We show that this is the case when the elliptic curve is E : y 2 = 
x 3 + ax 2 + bx. 

2. Result 

The main result is the following. 

Theorem 2.1. Let E(K) be an elliptic curve defined above over a 
finite field K. Let S = {P G E(K)\P = (x,y) with x being square or 
P = oo}, where oo is the identity of E(K). Then we have 

#E(K)/2 if b is a square in K 

#E(K)/2 + 1 if b is not a square in K. 

Proof. Consider E' : Y 2 = X 3 — 2aX 2 + rX. Then there is an isogeny 
(f) : E' — > E of degree 2 defined by 

Y 2 Y(r-X 2 ) 



#5 



(2.1) 0:(x,y)^ 
(See page 70, Example 4.5 in pp.) 



AX 2 ' 8X 2 
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Then by the isomorphism theorem we have, E'(K)/Ker(4>) = lm(<p). 
Since E and E' are isogenous, it is easy to see that #E(K) = #E'(K). 
(See page 153, Exercise 5.4 (a) in pp.) Also we have Ker(0) = {oo, (0, 0)}. 
Hence we have 

(2.2) #lm(0) = 4E{K)/2. 

Now we show that 

lm(0) if 6 is a square in K 

lm(0) U {(0, 0)} if b is not a square in K. 

Let R denote the right hand side. It is easy to see that the preimage 
of (0, 0) by <fi over the algebraic closure K is {(a ± 2v^&, 0)}. Hence the 
preimage is in E(K) if and only if b is a square in K. So (0, 0) is in 
both S and R. 

Suppose P G S. If P is oo, then clearly P G Im(</>). If P = (x,y) ^ 
(0, 0) with x square, then we need to solve 

Y 2 Y(r-X 2 ) 

x > — — = y 



AX 2 ' 8X 2 

for (X,Y) G E'(K). By the first equation, using the relation Y 2 = 
X 3 - 2aX 2 + rX, we have X 2 - 2(a + 2x)X + r = 0. Hence we get 
X = a + 2x ± 2\/ x 2 + ax + Now since = x(x 2 + ax + 6) and x is a 
nonzero square, we see that x 2 + ax + 6 is also a square. Hence X G K. 
By the second equation for Y, we solve Y = 8yX 2 (r — X 2 )" 1 G K. 
Here r — X 2 ^ since ?/ 7^ 0. Hence we get a point (X, Y) G E'(K) 
such that 0(X, y) = (x,y). Therefore, we have S C R. 

The converse follows by (12. ip and we have R = S. 

Now we have 

j,g _ ( #lm(0) if 6 is a square in K 

1 #lm(0) + 1 if 6 is not a square in K. 

By the equation 12.21 



#E(K)/2 if 6 is a square in K 

#E(K)/2 + 1 if 6 is not a square in K. 
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